wo 2005/048526 



PCT/KR2004/002874 



[Fig. 1) 



DRAWINGS 



r user 
^3 , 



100a 






domain 




web 




server 




B 



300 




server 



400 



authority 
information 
storing 
module 



[Fig. 2] 



100b 



authority 
Information 
storing 
module 



304 _r 



312 > 



web browser 



m? Z> 



AA request 



AA cookie 



request 



AA server 



\ management 
module 



AA module 



302 
308 



provider 



ACL cache ^ 
control module 



schema 
' provider 



encryption I J 
module 



108- 



domain web server i08 



AA module 



ACL cache 



decryption 
/ module 



resource 
request 
processing 
module 



• 500 



400 



300 



100 



1/7 



wo 2005/048526 



PCT/KR2004/002874 



[Fig. 3] 



l.iog in 



2. request 
authentication 



3, authentication & 
refer authority 
attribute 





4. set AA cookie 



(Fig. 4] 



authortty 
Information 
storing 
module 



user 



web browser 




S5 




.500 



j ACL cache L 
Ji control module I 

'84 ' 



schema 

310 ^^L£^^ 



encryption | / 
module ^rr 



308 10 



106- 



^ ^ ACL cache 



decryption 
/ module 



resource 
request 
processing 
module 



300 



100 



2/7 



wo 2005/048526 



PCT/KR2004/002874 



[Fig. 5] 



1 . request access 




internet 





100 


1 — 



2. check user authority 



request URL 
/mall/view.asp?... 








extract Role 
from cookie 
Role=A8:Bf.03 







/community 



-}/hobby/skateboard/ 
/hobby 



/mail/ 

/adult/boardi/ 
/premium/ 



refer to ACE 10 of requested resource 




check ACE ID 
existence from 
user Role 



[Fig. 6] 



user 




400 300 100 



3/7 



wo 2005/048526 



PCT/KR2004/002874 



[Fig. 7] 
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IFig. 16] 
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